4 ms·
Looks reasonably secure! I expected some horrifying engineering mistake, but the system looks well-designed by modern standards.
by atemerev 8y ago
Looks reasonably secure! I expected some horrifying engineering mistake, but the system looks well-designed by modern standards.
- tinus_hn 8y agoIt allows ssh login to system accounts without passwords, that seems like a pretty big mistake.
- jmartinpetersen 8y agoFrom what did you conclude this? I read it as if it allowed login over serial for those accounts, he didn't mention ssh in that context.
- solarkraft 8y agoStill, unprotected accounts seem like a pretty insecure idea to me. That's how our "attacker" got themselves in. Of course in a free world physical access to a device you own would mean that you can modify its behavior ("hack" the software).
- jmartinpetersen 8y agoSure, of course, but requiring a serial connection through a physical cable is still a less useful attack vector than ssh over wifi, which is what I gathered from the grandfather post - but not the article.
- bdelay 8y agoYou are correct. I don't believe those accounts worked over ssh due to a lack of password, just local serial.